[B! èªè¨¼] skommaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

skomma id:skomma

èªè¨¼ã«é–¢ã™ã‚‹skommaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OAuth2ã®æ¬¡ã«æ¥ã‚‹ã¨è¨€ã‚ã‚Œã‚‹èªå¯ãƒ—ãƒãƒˆã‚³ãƒ«GNAPã¨ã¯ãªã«ã‹ | ãƒ¡ãƒ«ã‚«ãƒªã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒªãƒ³ã‚°
Merpay Advant Calendar 2020ã€23æ—¥ç›®ã®è¨˜äº‹ã¯ã€è¶£å‘³ã§èªè¨¼èªå¯ã‚’ã‚„ã£ã¦ã„ã‚‹ @nerocrux ãŒé€ã‚Šã„ãŸã—ã¾ã™ã€‚ æœ€è¿‘ GNAP ã¨ã„ã†èªå¯ãƒ—ãƒãƒˆã‚³ãƒ«ã®ãƒ¯ãƒ¼ã‚ãƒ³ã‚°ã‚°ãƒ«ãƒ¼ãƒ—ãƒ‰ãƒ©ãƒ•ãƒˆãŒå‡ºã¦ã„ã¦é ‘å¼µã£ã¦ç´°ã‹ãèªã¿ã¾ã—ãŸã®ã§ã€ï¼ˆæ¬¡å›žã¯ã„ã„åŠ æ¸›ã«ä»•äº‹ã§ã‚„ã£ã¦ã‚‹ã“ã¨ã«ã¤ã„ã¦ãŠè©±ã—ã¾ã™ãŒï¼‰ä»Šå›žã¯ãã® GNAP ã«ã¤ã„ã¦ç´¹ä»‹ã•ã›ã¦ãã ã•ã„ã€‚ GNAP ã¨ã¯ãªã«ã‹ï¼Ÿ GNAP ã¯ Grant Negotiation and Authorization Protocol ã®ç•¥ã§ã€èªå¯ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã™ã€‚Justin Richerã•ã‚“ã¨ã„ã†æ–¹ã‚’ä¸å¿ƒã«ç–å®šã—ã¦ã„ã¾ã™ã€‚ä½œè€…ã«ã‚ˆã‚‹ã¨ã€GNAP ã®ç™ºéŸ³ã¯ ã’ãªã£ã· ã«ãªã‚Šã¾ã™ã€‚ èªå¯ï¼ˆAuthorizationï¼‰ãƒ—ãƒãƒˆã‚³ãƒ«ã¨è¨€ãˆã°ã€OAuth 2.0 (RFC6749) ãŒåºƒãçŸ¥ã‚‰ã‚Œã€é‹ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚GNAP ã¯ OAuth 2 ã®å¾Œç¶™ã¨ã—
skomma 2021/12/20
èªè¨¼

ä»•æ§˜

authorization

authentication

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
OpenID Connectã®ãƒ•ãƒãƒ¼ã‚„ã€JWKã‚„PKCEã«ã¤ã„ã¦è§£èª¬
2020å¹´3æœˆ17æ—¥ã€æ ªå¼ä¼šç¤¾AuthleteãŒä¸»å‚¬ã™ã‚‹ã€ŒOAuth & OIDC å‹‰å¼·ä¼š ãƒªã‚¿ãƒ¼ãƒ³ã‚ºã€å…¥é–€ç·¨ã€‘ã€ãŒé–‹å‚¬ã€‚åŒç¤¾ã®å…±åŒå‰µæ¥è€…ã§ã‚ã‚Šã€ãƒ—ãƒã‚°ãƒ©ãƒžãƒ¼å…¼ä»£è¡¨å–ç· å½¹ã§ã‚‚ã‚ã‚‹å·å´Žè²´å½¦æ°ãŒã€OAuth 2.0 / OIDCã®ä»•æ§˜ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ãŸã€‚æœ¬è¨˜äº‹ã§ã¯ã€OpenID Connectã®ãƒ•ãƒãƒ¼ã‚„JWKã¨IDãƒˆãƒ¼ã‚¯ãƒ³ã®é–¢ä¿‚ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«éžå¸¸ã«é‡è¦ã‹ã¤å¿…é ˆãªPKCEã«ã¤ã„ã¦ã‚ã‹ã‚Šã‚„ã™ãè§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ OAuth 2.0ãƒ•ãƒãƒ¼ã¨OpenID Connectãƒ•ãƒãƒ¼ã¨ã®é–¢ä¿‚ å·å´Žè²´å½¦æ°ï¼šä»Šåº¦ã¯OpenID Connectã®ãƒ•ãƒãƒ¼ã®èª¬æ˜Žã‚’ã—ã¾ã™ã€‚ OAuth 2.0ã§ã¯èªå¯ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‚’ä½¿ã†ãƒ•ãƒãƒ¼ã¨ã—ã¦ã€èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼ã¨ã‚¤ãƒ³ãƒ—ãƒªã‚·ãƒƒãƒˆãƒ•ãƒãƒ¼ã®2ã¤ãŒã‚ã‚Šã¾ã™ã€‚èªå¯ã‚³ãƒ¼ãƒ‰ãƒ•ãƒãƒ¼ã®èªå¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¨ã‚¤ãƒ³ãƒ—ãƒªã‚·ãƒƒãƒˆãƒ•ãƒãƒ¼ã®èªå¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆã¯ã€ã©ã†ãªã£ã¦ã„ã‚‹ã‹ã¨ã„ã†ã¨ã€ã¾ãšresponse_typ
skomma 2021/11/11
OpenID

ä»•æ§˜

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

èªè¨¼
ãƒªãƒ³ã‚¯
Microservices ã«ãŠã‘ã‚‹èªè¨¼ã¨èªå¯ã®è¨è¨ˆãƒ‘ã‚¿ãƒ¼ãƒ³
ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã«ãŠã‘ã‚‹èªè¨¼ã¨èªå¯ã®ã€ä¸€èˆ¬è«–ã¨ã—ã¦ã®è¨è¨ˆãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’èª¿ã¹ãŸã¨ã“ã‚ã€Web ä¸Šã®è¤‡æ•°ã®è¨˜äº‹ã§ä¼¼ãŸã‚ˆã†ãªãƒ‘ã‚¿ãƒ¼ãƒ³ãŒç™»å ´ã—ã¦ã„ãŸã€‚ã“ã“ã§ã¯ã€ã¾ãšèªè¨¼ã¨èªå¯ãŒå®Ÿç¾ã—ãŸã„ä¸€èˆ¬çš„ãªè¦ä»¶ã¨ã€ãã®ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã§ã®é›£ã—ã•ã‚’æ•´ç†ã—ã€èªè¨¼ã¨èªå¯ã«åˆ†ã‘ã¦èª¿æŸ»ã—ãŸãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ã¾ã¨ã‚ãŸã€‚ ã‚ãã¾ã§ â€œä¸€èˆ¬è«–â€ ãªã®ã§ã€å®Ÿéš›ã«ã¯å€‹ã€…ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã«ã‚ã‚ã›ã¦ã‚¢ãƒ¬ãƒ³ã‚¸ãŒå¿…è¦ å¾€ã€…ã«ã—ã¦ã“ã® â€œã‚¢ãƒ¬ãƒ³ã‚¸â€ ã«ä¾¡å€¤ãŒå®¿ã‚‹ã‚‚ã®ã ãŒã€ã¾ãšã¯ã‚»ã‚ªãƒªãƒ¼ã‚’çŸ¥ã£ã¦ãŠããŸã„ã¨ã„ã†ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã§èª¿æŸ»ã—ãŸ Web ä¸Šã®è¨˜äº‹ã‚’èªã‚“ã§ã¾ã¨ã‚ãŸã ã‘ãªã®ã§ã€æ‰‹ã‚’å‹•ã‹ã—ã¦ã®ç¢ºèªã¯ã—ã¦ãŠã‚‰ãšã€ç†è§£ãŒç”˜ã„éƒ¨åˆ†ã¯ã”å®¹èµ¦ãã ã•ã„ å…·ä½“çš„ãªé€šä¿¡æ–¹å¼ã‚„ã‚µãƒ¼ãƒ“ã‚¹é–“é€šä¿¡ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ã„ã£ãŸå…·ä½“è«–ã¾ã§ã¯è¸ã¿è¾¼ã‚ã¦ã„ãªã„ã€‚ã“ã®ã¸ã‚“ã¯ã‚µãƒ¼ãƒ“ã‚¹ãƒ¡ãƒƒã‚·ãƒ¥ã‚„ã‚¼ãƒãƒˆãƒ©ã‚¹ãƒˆãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã¨ã„ã£ãŸãƒˆãƒ”ãƒƒã‚¯ãŒç™»å ´ã™ã‚‹ã¨æ€ã‚ã‚Œã‚‹ ã“ã‚Œã‚‰ã¯æ¬¡å›žä»¥é™ã® Todo ã¨ã—ã¦ã„ã¾ã™ ãã®
skomma 2020/07/06
èªè¨¼

æ¨©é™

authentication

è¨è¨ˆ

authorization

microservice
ãƒªãƒ³ã‚¯
ã‚ªãƒƒã‚¹ï¼ã‚ªãƒ©èªè¨¼å‘¨ã‚Šã‚’ã¾ã¨ã‚ã¦ã¿ãŸ - ã©ã‚“ã¾ã„ã“ã®ãƒã‚¿å¸³
ã“ã‚“ã«ã¡ã¯ã€‚ä»Šæ—¥ã¯è¶£å‘ã‚’å¤‰ãˆã¦åƒä»£ç”°åŒºç«‹å›³æ›¸é¤¨ã«æ¥ã¦ã¿ã¾ã—ãŸã€‚ www.library.chiyoda.tokyo.jp å›³æ›¸é¤¨ã¯æ™®æ®µã‚ã‚“ã¾ã‚Šè¡Œã‹ãªã„ã®ã§ã€åœ°å…ƒã®å›³æ›¸é¤¨ã¨ã®é•ã„ã«é©šãã§ã—ãŸã€‚ éƒ½å†…ã®å›³æ›¸é¤¨ã£ã¦åºƒã„ã—ç¶ºéº—ã§ã™ãã€‚ ä¹æ®µä¸‹ã‹ã‚‰å‰²ã¨è¿‘ã„ã€ç½®ã„ã¦ã„ã‚‹è”µæ›¸ã®ã‚¸ãƒ£ãƒ³ãƒ«ãŒå¤šã—ã€å¸ã®ã‚¸ãƒ£ãƒ³ãƒ«å¤šã—ã€ç„¡ç·šWifiã‚ã‚Šã€é›»æºã‚ã‚Šã€ã§ã‹ãªã‚Šä½¿ã„ã‚„ã™ã‹ã£ãŸã§ã™ã€‚ é™ã‹ã§è½ã¡ç€ã„ãŸé›°å›²æ°—ã§éŽã”ã—ã‚„ã™ã„æ°—ãŒã—ã¾ã™ãŒã€ç„¡éŸ³ãªã®ã§ç‹¬ã‚Šè¨€ãŒå¤šã„äººã¯æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„ã€‚ ã•ã¦ã€å‰å›žã®è¨˜äº‹ã«ã¤ã„ã¦@okeee0315ã•ã‚“ã‹ã‚‰ã“ã‚“ãªã‚³ãƒ¡ãƒ³ãƒˆã‚’ã€‚ èªè¨¼å›žã‚Šã¯å¤§äº‹ã€ADã®å‰ã«èªè¨¼ã¨èªå¯ãŒå¿…è¦ã‹ã‚‚ / ADãªã«ãã‚ŒãŠã„ã—ããªã„(æ³£) - ã©ã‚“ã¾ã„ã“ã®ãƒã‚¿å¸³ https://t.co/MEFI6o5qNAâ€” okeee (@okeee0315) 2016å¹´5æœˆ3æ—¥ ã»ã»ã†ã€‚ADã¯ã¾ã ç¾Žå‘³ã—ããªã‹ã£ãŸã®ã§ã€æ•™ãˆã«å¾“ã„èªè¨¼å‘¨ã‚Š
skomma 2019/04/22
OAuth

æŠ€è¡“

OpenID

ãƒã‚¿

èªè¨¼

auth

security

authentication

api
ãƒªãƒ³ã‚¯
1